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ABSTRACT. Composite Overwrapped Pressure Vessel (COPVs) that have survived a 
long service time under pressure generally must be recertified before service is extended. 
Sometimes lifetime testing is performed on an actual COPV in service in an effort to validate 
the reliability model that is the basis for certifying the continued flight worthiness of its 
sisters. Currently, testing of such a Kevlar49®/epoxy COPV is nearing completion. The 
present paper focuses on a Bayesian statistical approach to analyze the possible failure time 
results of this test and to assess the implications in choosing between possible model 
parameter values that in the past have had significant uncertainty. The key uncertain 
parameters in this case are the actual fiber stress ratio at operating pressure, and the 
Weibull shape parameter for lifetime; the former has been uncertain due to ambiguities in 
interpreting the original and a duplicate burst test. The latter has been uncertain due to 
major differences between COPVs in the data base and the actual COPVs in service. Any 
information obtained that clarifies and eliminates uncertainty in these parameters will have 
a major effect on the predicted reliability of the service COPVs going forward. The key 
result is that the longer the vessel survives, the more likely the more optimistic stress ratio is 
correct. At the time of writing, the resulting effect on predicted future reliability is dramatic, 
increasing it by about one “nine”, that is, reducing the probability of failure by an order of 
magnitude. However, testing one vessel does not change the uncertainty on the Weibull 
shape parameter for lifetime since testing several would be necessary.. 

I. Introduction 

W e study the effects of various test parameter choices on possible outcomes from the accelerated stress-rupture 
testing of a single, 40-inch diameter, Kevlar49 R /epoxy composite-overwrapped pressure vessel (COPV) with 
a titanium liner, called SN007. In particular we focus on the implications of particular test survival times (or the 
failure time) on reliability predictions for multiple such vessels in future missions cycles of given time durations. 
The context is that much prior stress rupture test data is available on the stress-rupture performance of 
Kevlar49®/epoxy strands and laboratory scale vessels, thus allowing the prediction of reliability for a given stress 
ratio and time in service, but the details in terms of the yarn denier, the epoxy and the wrap pattern differ 
significantly. Furthermore, the exact stress ratio (stress level in service divided by maximum stress level from a 
burst test) is uncertain since (i) only two burst tests had originally been performed but with conflicting results, (ii) 
quality control measurements in terms of permanent delta volume growth during the proof test (autofrettage) 
differed by a factor of two across the various production and qualification test units, and (iii) stress analysis based on 
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instrumentation of the burst tests and the design configuration led to conflicting stress ratio predictions for the 
vessels in service. This has resulted in considerable uncertainty in their actual reliability making predictions 
necessarily more conservative. In addition there was uncertainty in the amount of variability in the lifetime 
distribution as expressed in terms of the Weibull shape parameter for lifetime. These past analyses and data, 
discussed in two white papers [1,2], have pointed to two possible values of the stress ratio and two possible values 
of the Weibull shape parameter for lifetime, but with ambiguity on which pair actually applies to the 40-inch COPVs 
in question. The purpose of the single stress-rupture test on SN007 was to provide definitive information on which 
pair of key parameter values best describes the behavior of 40-inch of Kevlar49'749 COPVs in question, since the 
predicted lifetime for the two pairs of parameter values differs by more than an order of magnitude. 

Since an extensive and fairly consistent data base is available on both ambient and elevated temperature 
performance of Kevlar49 '/epoxy materials and small test vessels, the test was also accelerated in time by a factor of 
about 40 (under the pessimistic parameter assumptions) using a higher steady temperature than occurs in service 
(though not higher than has typically occurred in the past during the pressurization phase) but at the maximum 
operating pressure used in service. This strategy was designed to provide the necessary test information in a few 
months rather than the 200,000 hours (28.5 years) that would be required under standard service conditions. In fact, 
two temperature levels were selected to be run in sequence: the first at 130°F was to be applied until the time 
corresponding to mean reliability of 0.9986 was reached under the most pessimistic stress ratio and Weibull lifetime 
parameter values. At that point the temperature was to be increased to 160°F and the test continued until the vessel 
either fails in stress rupture or survives a pre-set time at which a third stress level would be contemplated. 

Given the significant prior history and knowledge regarding several of the key model parameters, the problem 
could be cast in a Bayesian statistical framework and model with uncertainty distributions on all the material stress- 
rupture parameters (based on statistical analysis of the extensive prior material data sets) as well as discrete 
Bernoulli uncertainty distributions on the two possible pairs of stress ratios and Weibull lifetime shape parameter 
values. Specifically, the result of the test are to permit resolution in choosing between (i) two competing stress ratio 
models (see ref. [2]), an optimistic Model 2, and a pessimistic Model 4 (equivalent to the currentl model) and (ii) 
two competing values for the Weibull lifetime shape parameter, a value 1.625 based on the Lawrence Livermore 
National Laboratories (LLNL) data base on small Kevlar49 '/epoxy COPVs, and 2.45 based on the authors’ study of 
the NASA-JSC Fleet Leader vessel data, which is more relevant to the Kevlar49 '/epoxy 40-inch vessels in question 
(see ref. [1], (Originally there were two other models, Model 1 and Model 3, but these proved irrelevant and were 
drooped from consideration [2].) Uncertainties regarding these two basic parameter pairs are the major driver of the 
relatively low predicted reliability of these vessels and any shrinking of this uncertainty would yield major benefits 
in terms of predicted reliability. Available data prior to the test data allows calculation of what is called a Bayesian 
‘prior’ joint uncertainty distribution on all the parameter values as well as the reliability overall. Depending on the 
lifetime of SN007 observed from the test, Bayes theory allows calculation of a revised ‘posterior’ uncertainty 
distribution from which updated reliability predictions can be made for the 40-inch COPVs in question. In essence, 
the longer the vessel lasts the better the future reliability. 

The results of the Bayes analysis calculations show that the longer vessel SN007 survives in the stress rupture 
test, the more likely it becomes (and dramatically so) that the more optimistic Model 2 for the stress ratio is correct. 
Beginning the test with probability 0.5 (even 50-50 chance) that Model 2 is correct rather than Model 4, the 
posterior probability Model 2 is correct rises even higher to 0.95. The ultimate effect on the predicted reliability of 
the 40-inch COPV in question is dramatic, being of the order of one ‘nine’ (reduction in the predicted probability of 
failure by an order of magnitude). The test turns out to be much less effective in choosing between the two 
competing lifetime shape parameter values, though there is a slight shift in favor of the more optimistic value, as the 
vessel survives longer and longer. Regarding the two competing shape parameter values, the case of putting three 
identical vessels on test is considered, and if they all fail fairly close together in time, a prior probability of 0.5 that 
the optimistic Weibull shape parameter value is correct rises to 0.76. However, to be as effective as in choosing 
between the two stress ratios at least 6 identical vessels would be required. 

II. Reliability Model with Various Uncertain Parameters 

For the stress-rupture testing, we consider the application of many sequential future mission cycles each of 
duration f mc given that the vessel has survived the equivalent of m such mission cycles in the past. These cycles 
may actually involve pressurization and depressurization at the beginning and end of each cycle or simply be 
convenient divisions of time under steady pressure. (The overwrap lifetime has been shown to depend primarily on 
the cumulative time under pressure.) The model for the probability of survival of n such mission cycles is given by 
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where t n = nt mc and t m = mt mc and various other parameters in (1) are viewed as random variables with uncertainty 
distributions based on previous data and the stress ratio and Weibull lifetime shape parameter values. In particular 
? 007 = stress ratio on 40-inch vessel SN007, 

p = power-law exponent relating stress ratio to the lifetime scale parameter measured 
from the LLNL data base, 

P = Weibull shape parameter for lifetime relevant to 40-inch vessels and determined 
from the LLNL data base and test results from NASA Fleet Leaders, 

f rc f = characteristic lifetime at stress ratio unity estimated from the LLNL data base, 

Allnl = a random variable reflecting uncertainty in the stress ratios used to generate 
the LLNL data base as a result of a limited number of burst tests. 

Regarding notation, placement of a double-arrow over a parameter, 9 , to give, 0 , means that the parameter is 
treated as a random variable having an uncertainty distribution that may be one of several types: normal, log- 
normal, Weibull, Beta or Bernoulli. Each has parameters reflecting central tendency, 9, and variability, d> . For 
instance, for a log-normal uncertainty distribution on a parameter, \x\0 = Normal | In 9, ojj means In 9 has a normal 

uncertainty distribution, which implies 9 follows a lognormal distribution, where 9 is viewed as the mean of 9 
and cu = <r/$ is its coefficient of variation (standard deviation, a , divided by mean, 9). Note that in this 
lognormal case, d> is entered into the normal distribution as though it were a standard deviation parameter. Also, 
9=Beta(a,b j means 9 follows a Beta uncertainty distribution on (0, l) with parameters a and b , which will be 

characterized later in terms of the mean and coefficient of variation of 9 . In addition, I = Bernoulli ( //) means 7 
is an indicator random variable that follows a Bernoulli distribution, which means that / has possible values 1 or 0 
with probabilities p and 1 -p, respectively. Finally 9 = Weibull a) means 9 follows a Weibull uncertainty 

distribution with scale parameter, 9 , and shape parameter, a . (Note here that 9 is not the mean of the uncertainty 
distribution, since the mean is actually 9 T(l + 1 /a ) .) 

With this background, the uncertainty distributions for the parameters in the model based on prior information 
(primarily the LLNL vessel data base) are as follows: 

In p = Normal (in A<7,) (2) 

in F ref = Normal ( In £ ref - p In ^ piv , <j^ ) + p In s piv (3) 

where W is a constant called the pivot stress ratio (which is the mean of the stress ratios for all specimens for 
which lifetimes were obtained) 

ln AxNL = Normal (in ) (4) 

Also 

P = Am/ao* + A.LNL (' " V h ) (5) 

where 
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I fiM = Bern0ul,i (Pfi oj ( 6 ) 

Here (5) indicates is that there will be two competing versions of the Weibull shape parameter for lifetime: one is 
Axnl the currently accepted value based on the LLNL data base, and one is /? 0rb based on data from Orbiter vessels, 
mainly the JSC Fleet Leaders discussed elsewhere in a white paper [1]. In (6), is the pre-test or ‘prior’ 
probability that /? 0rb is the correct value to use for reliability modeling of the large 40-inch vessels of primary 
interest. Also 

Pn = l~Pe ( 7 ) 

1 PLLNL r POrb v 7 

is the prior probability /? LLNL , is correct instead. For each of the two Weibull shape parameter choices, the 
uncertainty distributions are respectively 


ln A.lnl = Normal (in p^d,^ ) 

(8) 

and 


ln P orb = Normal ( ln p Qrh , ) 

(9) 

The stress ratio on SN007 has the uncertainty structure 


*^007 — ■ S 007,M2 7 M2 ^007,M4 (l _ 7 M2 ) 

(10) 

where 


7 m 2 = Bernoulli (/? M2 ) 

(11) 


Here (10) indicates that the stress ratio model for SN007 also involves two competing versions taken from [2]: the 
first is Model 2, which involves stress ratio s 007M2 , and the second is Model 4, which involves stress ratio s 007M4 . 
Model 4 is virtually the same as currently used model for these 40-inch vessels. For vessels that have high delta 
volumes from autofrettage, Model 4 gives significantly higher stress ratios than Model 2. In (11), p M1 is the pretest 
or ‘prior’ probability that Model 2 is correct, in which case s 007 M2 would be the correct stress ratio value to use in 
reliability calculations. The probability that Model 4 is the correct one is 

Pm4= 1 ~Pm2 ( 12 ) 

in which case s 007 M4 would be the correct stress ratio to use. 

Regarding the uncertainty distribution for each stress ratio, given that its particular model is the one, we consider 
two versions: One version is based on the Beta distribution and the other is based on the Weibull distribution. The 
Beta distribution is commonly used to represent prior distributions in Bayesian analysis, but the Weibull distribution 
is more natural in this case since the stress ratios in the Orbiter vessels are ultimately based on the outcomes of one 
or two burst tests where the underlying burst strength is typically Weibull. In the Beta version we have 

^oo7,M2 — Beta | a 2 , b 2 j (13) 

^007.M4 — beta | ct 4 , b 4 j (14) 

where a, , b t ,are parameters of the Beta distribution for Model i as explained later. In the Weibull version 

l7 007 ,M 2 = Weibull (.? 007 ,M 2 /r (l + l /®2 ) > ®2 ) (15) 

5 oo 7 ,m 4 = Weibull ( s 007M4 /r ( 1 + 1 /a 4 ^,& 4 ^ (16) 

where a = pp is the Weibull shape parameter for burst strength, whose effect is also discussed in more detail later. 
Following a brief comparison of the two versions, which yield virtually the same mean and 95% confidence bound 
on predicted reliability, we use the Weibull version for all examples, since the Beta version offers no advantage. 
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For a standard mission duty cycle of an OMS vessel on the Orbiter, the currently used parameter values (before 
running the test) are 

=105 hours 


t m = 3465 hours (past survival time of SN007 at standard conditions) 
p = 24 


a> p = 0.04 


'ref = W =1 ' 43 h0UrS 


CO, = 0), 


= 0.03 


s . = 0.7 (pivot stress ratio, which is the mean of LLNL vessel stress ratios) 


^LLNL 1 

a>, = 0.0030 

/l LLNL 

/? LLNL = 1.625 (lifetime shape parameter based on LLNL vessel data) 


co„ = 0.080 

Pllnl 


(17a) 

(17b) 

(17c) 

(17d) 

(17e) 

(17f) 

(17g) 


However based on recent analysis of Orbiter type data, primarily the JSC Fleet Leaders [1], we propose the 
alternative Weibull shape parameter for lifetime given by 


/? 0rb = 2.45 (lifetime shape parameter based on Orbiter type data) 


co Poa = 0.30 


(17h) 


and we earlier introduced the idea of the prior probability, p fi , that [\ lrb is the correct choice for lifetime shape 
parameter, not /? LLNL . Later we consider various cases, p h =0, 1/5, 1/2, 1 , but primarily use p h =1/2 based 

on our prior judgment (though a strong case can be made for using y? 0rb =2.45 exclusively, i.e., p^ =1 as is 
discussed in [1]). The two alternatives for the stress ratio model are 
5 007 m 2 = 0-599 (estimate of stress ratio from Model 2) 

®M2 — l-2/« 2 

i 007 m 4 = 0.653 (estimate of stress ratio from Model 4) 

®M4 =l-2/« 4 

where 

«2 = PorbP = 59 
^4 = Pllnl P ~ 59 

and here too we have introduced the idea of the prior probability p M1 that Model 2 is correct. Among various cases 
we consider are p M2 = 0, 1/5, 1/2 and 1 , although most of the examples assume our first judgment value 
/3 m2 = 1/2 . Also, returning to the Beta distribution parameters a 2 , b 2 , and a 4 , b 4 , these are calculated from (19i) 
and (19j) as 


a 2 = [(l 

^007, M2 )/ 

(®M2 ) 

^007,M2 J 

(20) 

K = a 2 1 

T J 007,M2 ) 

/^007,M2 


(21) 

«4 = [( ] 

~ ^007,M4 )/ 

(®M4 ) 

_ ^007,M4 j 

(22) 


(17i) 

(17j) 

(18) 

(19) 
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( 23 ) 


t 4 (* 4(1 ^007,M4 ) j ^ 


It is important to note that with the prior choices p p =1/2 on the lifetime shape parameter, and p U2 = 1/2 , on 
stress ratio Model 2, the predicted vessel reliability is influenced most heavily by the pessimistic values 
/?llnl = 1 -625 and i 007M4 = 0.653 since they each also have probability 1/2. That is, the more optimistic Orbiter 
based values cannot significantly improve the predicted vessel reliability unless the probabilities, and p M2 , are 
much higher than 1/2 . 

A complete derivation of the two stress ratio models is given in [2]. These models capture two alternate 
interpretations of the various data obtained in the WSTF testing of SN011. The higher stress ratios in Model 4 are 
primarily due to assumed overwrap stiffness loss in a vessel that is proportional to delta volume from proof. This 
was about 12% in SN011 and is assumed to be about the same in SN007 when using Model 4. Model 2, however, 
assumes this large stiffness loss was a peculiarity only of SN011, which was sidelined as a special test vessel and 
was never put into service. Study of the WSTF cycling and burst test data, original manufacturer data, and outer 
surface profile measurements made in 2005 strongly suggest that SN011 was a singularly anomalous vessel that is 
uncharacteristic of other OMS vessels, especially those with serial numbers SN015 and above currently in service. 

One technical note is that the model stress ratio is the applied fiber stress in the vessel (as determined from a 
mechanical analysis based on the applied pressure) divided by the Weibull scale parameter for effective fiber 
strength as determined from burst tests. In the OMS vessels, only one burst test was performed originally (SN002- 
Q), and as mentioned, one was performed later SN011, which itself required much interpretation. Thus the burst 
values obtained are not amenable to standard maximum likelihood analysis for purposes of estimating the Weibull 
scale parameter for effective fiber strength in the denominator. The fiber strength values obtained from one or two 
burst tests are more appropriately taken as estimates of the mean of the Weibull distribution. Thus, to estimate the 
scale parameter, the values from the burst test must be divided by F(l + l/a) , which increases their value by 2 or 

3%. The stress ratio values given above in (17i) and (17j) for SN007 and for Models 2 and 4 already reflect this 
adjustment, and thus, are slightly lower than when using the burst-strength based value directly in the denominator. 

It turns out, however, that when using the Weibull distribution to model the uncertainty in the stress ratio, the 
factor r(l + l/«) enters once again since simulated stress ratio values will on average be lower in value than i 007 , 

when it is used directly as the scale parameter. Thus the same correction of dividing by F(l + l/«) is required 

again, as seen in (15) and (16), but this time the effect is on the numerator of the stress ratio, and thus the two effects 
cancel. Thus, one might conclude that the correction can be ignored altogether, however, the first correction is 
needed in determining the parameters in the Beta distribution, given in (20) to (23). The need for care in these 
corrections is readily apparent when comparing reliability results based on the Beta uncertainty distribution on stress 
ratio versus the Weibull distribution. 


III. Bayesian Framework for Data Analysis 

We let 8 be a vector of possible uncertainty parameter values for the basic model 


(? ( A ( ref > A.LNL > Po rb ’ Pi 


LLNL > J 007,M2 ’ J 007,M4 I 


(24) 


which excludes for the moment the Bernoulli uncertainty regarding the correct choices of the Weibull shape 
parameter value and the stress ratio model. We let > 1 ( 8 ) be the prior likelihood function for all the parameters 

represented in uncertainty vector, 8 . Thus >]( 8 ) is the product of all the Normal and Beta or Weibull uncertainty 
density functions above. We also let 


R m (n\ 8 ,i,j;m) = exp 


J 007 


(■/) 


s Pfiif) 


.LNL J 


{ . A 


v/ref J 


m . 


(/? + m\ 


m 



hi = 0,1; 0&D. g 


(25) 


be the prior estimate of reliability after n test cycles, given possible values of these parameters in 8 from their 
space , and all four possible pairs of choices of the shape parameter value and the stress ratio model, and where 
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(26) 


and 


H 0 


J Axnl > ' ® 

1 ft Orb , * =1 


5 007 (7 ) 


I ,S ’o07,M4 > 7 ® 

[ ,S ’o07,M2 , 7 ~ 1 


(27) 


Thus for any set of parameter value choices in 9 and survival of a given number of mission cycles, n , we can 
easily calculate R 001 . We also let 


Po l m( i J) = \ 


T^llnlTW 

P(l 0li PM4’ 

PA.MPM2, 

.PPo*Pm2’ 


i = 0 ,y = 0 
i = 1,7=0 
/ = 0,7 = 1 
' = 1,7 = 1 


(28) 


where we recall 77 ^ = 1 - /> 0rb and p UA =\-p yp . This is a bivariate Bernoulli distribution of ‘prior’ probabilities 

on the correct Weibull lifetime shape parameter and stress ratio model. Then given survival by the test vessel of n 
mission cycles, i.e., ,V > n . the posterior distribution for the parameter uncertainties is 


h{9,i,j I n;m) = - 


R 001 {'1 1 g, U 7 ; m)n (g) Po, m (/, j) 

Z Po.m ( w ,v) J R 001 (n I 0,u,v;m)T](g)d0 


1,7 = 0,1 


(29) 


w>v=u,i n, 

where the integration is over the vector space Q u for all possible values of parameters in 9 . 
has occurred during mission cycle, N = n ,is handled similarly. In this case R om [n \ 9,i,j\m ) 


fool (« I 0,i,j\m) = R 001 (n \ g,i,j;m)0(i ) 


S 001 ( 7 ) 


\pmr t V(‘) 




V ^LNL J 


V^ref J 


(n + mY (,) 1 , i,j = 0,1 


based on the probability density function of the failure time multiplied by t m 


The case when failure 
is replaced by 

; g^n e (30) 


A. Independence of LLNL and Orbiter Based Uncertainty Parameters 

The uncertainty parameters developed from the LLNL data base are automatically independent of whatever 
lifetime N = n is observed in the test of vessel SN007. Thus the posterior marginal uncertainty distributions of 
these parameters will be the same as their prior marginal distributions. Secondly, the Beta or Weibull distributed 
uncertainty in the individual stress ratio 5 007 M2 from Model 2 and the stress ratio s 007M4 from Model 4 arose solely 

from (i) analysis of mechanical data (strain gages, DIG, eddy current probes) from the cycling and a burst test of 
SN011, (ii) the qualification reports on proof-testing, the cycling and original burst test of SN002-Q or SN003-Q, 
and (iii) study of the data supplied by the manufacturer for each of the 34 OMS service vessels. Thus, the posterior 
uncertainties reflected by Beta or Weibull distributed uncertainty parameters in g for the two possible stress ratio, 

s„o 7i m 2 an d 5 oo 7 M 4 , w *H th e same after the test as the prior uncertainties irrespective of the observed cycles to 

failure. This is because the largest component of these uncertainties arises from mechanics models interpreting two 
burst tests, on SN011 and on SN002-Q. However, what will change due to the test are the uncertainty probabilities, 
Pp and p M2 , on which stress ratio model and lifetime shape parameter are correct. The ‘prior’ probabilities will 

change to ‘posterior’ probabilities, denoted p Po n and p U2 n , depending on the number of cycles to failure, N = n . 

Thus, in advance of the test we can integrate out all the marginal joint distributions for all remaining uncertainty 
parameters reflected in g since they remain unchanged. Then we can focus on the two Bernoulli distributions 
characterizing the correct choice of the Weibull lifetime shape parameter and the stress ratio model. Carrying out 
this integration over 9 in the numerator of h(9,i,j\n\m ) above, we obtain the bivariate Bernoulli posterior 
distribution 
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h(i,j \n;m) = p n m (i,j) 


where 


W n, m {^J)Pp usl PM4^ ' = 0,7=0 

W n,n,{ i j)Pp M Pu^ '= 1 , 7=0 

< 

W „,n,(i>j)p^PM2> '= 0 , 7=1 
W n,m i}’ j) PpokPwl’ '=1,7=1 


W „,„, (',7') 


j ^007 ( W !<?,'> 71 

Of 

Yj Po,m (", v ) j R ooi ( n I 0,u,v,m)ri(0)d0 


',7 =0,1. 


(31) 


(32) 


are special weighting factors that depend on the number of survived cycles, n . The case where failure has occurred 
on mission cycle N = n exactly, is treated in a similar way except that R m (n \ d,i, j;mj is replaced by 

foo-j (" I <?, ',./>') • In this case the weights w n m ( i,j ) will be different, especially if failure occurs very early. The 
above analysis can also be extended to the case of several vessels, k , put on test, with N t = «, , N 2 =n 2 ,---,N k = n k 
being the failure times. In this case, / 007 (« | 0,i,j;m ) is replaced by the product 


/o07 («1 I #, ', 7; '") /007 («2 I ', 7; "') • • • /o07 («* I (?, ', 7i '«) 


(33) 


Whatever the test circumstances, the posterior probabilities for the lifetime shape parameter /? LLNL and stress 
ratio Model 2, being the correct choices are, respectively 

= Pn,m M + Pn, m (U) = K, m (h °) Pfi M P M 4 + W n,n (^P^Pul (34) 

and 

Pu2,n = P„,m (0,l) + T’„. m (1,1) = W nm (0,1 )P LLNL PU2 + W H.,n ( ] ’ ] )Pfl M P M 2 (35) 


B. Calculation of Posterior Uncertainty Distribution on Reliability 

To calculate the posterior uncertainty distribution on the reliability of SN007, we must carry out the integration 
in all four w nm (i,j ) components, and this is accomplished using Monte Carlo simulation. Then the posterior 

probability components p n m (i, j) can be calculated as well as the posterior probabilities, P p, A ,„ and 
Pp n = 1 — P/j ob , n a °d Pm 2 ,„ an d P M 4 » “1 _ Pm 2,« regarding which of the two Weibull lifetime shape parameters 
and stress ratio models are correct. The calculation of the posterior uncertainty distribution on the reliability must be 
performed over the full space of possible parameter values, kl e ® [(0,0),(l,0),(0,l),(l,l)l , where the quantity in 

square parentheses represents the possible bivariate Bernoulli values which determine the particular stress ratio 
model being used (Model 2 or Model 4) and the Weibull shape parameter being used ( /? LLNL or /? 0rb ) as defined in 
(26) and (27). One technical note is that numerical study of the various components shows that the posterior 
Bernoulli random variables, n and I M2 n are virtually independent in the posterior, as was assumed in the prior. 
Thus, in keeping with (30), the posterior bivariate Bernoulli probabilities can be taken as 


Pfiu^."Pmn’ 

o 

II 

cT 

II 

Pp OA ,»P*M,n’ 

'=1,7 = 0 

P/^,nPM2,n> 

' = 0,7=1 

Ppo^.nP M2,„, 

' = 1,7 =1 


(36) 


As the final step, to calculate the posterior uncertainty distribution on the reliability we have used Monte Carlo 
simulation to determine > 50,000 replicated outcomes of all model parameters in the extended vector space, 

Q = Clg ® [(0,0),(l,0),(0,l),(l,l)] , including Bernoulli outcomes generated using (36). From each replication we 
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calculate a reliability value using (1), and the uncertainty distribution is the empirical distribution function generated 
from the set of calculated reliabilities. Conceptually, we are calculating the uncertainty distribution function 

r X Pn,m (b J ) f R 001 (« I Q’ U ./; ™) n( 0 )d 0 

Q(^007 < -ft) L _ 

X ^007 (« | 0,u,v;m)jj(0)d0 

u,v=0,l 5 ' ' 

= X ^, m (b^) P (^007 ( M lby; w ) <i? )> 0<7?<1 

i, 7=0,1 

where the numerator calculates reliabilities only for combinations of all parameter values in Q which yield 
R 001 < R , given reliability level, R . Below, R is expressed in numbers of ‘nines’. 

C. Effects of Prior Probability Assumptions and Beta vs. Weibull Uncertainty on Stress Ratio 

Next we consider a comparison of uncertainty distributions on the predicted reliability for one mission cycle of 
SN007 based on the Beta versus Weibull distribution for modeling stress ratio uncertainty. The Beta parameter 
values have been chosen as given above, and the Beta and Weibull coefficients of variation have been chosen to 
match. Results are calculated for various prior or posterior probabilities p p = 1 - and p^ =1- p M4 . 


p { R ooi (« I m ) < R ) 


Normal probability plot 



0123456789 

Reliability in number of 'Nines" 


Figure 1. Comparison of reliability predictions on SN007 for a mission cycle t mo = 105 Ins. , given pessimistic 

P Poto = Pul = 0 , mixed p fi<M = p M2 - 1/2 and optimistic p fi ^ - p, n = 1 cases. 

Predictions applicable to one mission of a vessel similar to SN007 are shown in Figure 1 for f mc = 105 hours , and 
past survival t m = 3465 hours . The most pessimistic case is p h = p M2 = 0 , so /? LLNL =1.625 and 5 007M4 = 0.653 . 
The mixed case assumes p fi = p M2 = 1/2 , and the most optimistic case p fi = p^ = 1 , where /? Qrb = 2.45 and 
.?oo 7 vp =0.599 applies. Monte Carlo simulation was used on all model parameters including the Bernoulli random 
variable reflecting the choices of the lifetime shape parameter and stress ratio Model. We find that the point 
estimates of the predicted reliabilities are the same for both the Beta and Weibull versions and the mean reliabilities 
and point reliabilities are close, especially for the most optimistic case. For the more pessimistic cases, however, the 
Beta distribution gives slightly lower predictions. 
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The cause of this more pessimistic behavior in the Beta distribution case rests in the behavior of the deep tail, 
which reflects the premise that the stress ratios calculated from one or two burst tests may, in rare cases, be much 
worse than the true value. This would require that the original burst test (one or two) reflected unrealistically strong 
vessels from the population. However, this is more a characteristic of the behavior of the upper tails of the Beta 
distribution itself, which assumes a power form for the probability of strong vessels occurring in the original burst 
tests to set stress ratio. The Weibull distribution, however has an exponentially decaying upper tail, and consistent 
with experimental observation on various data sets of strands and pressure vessels, indicates that vessels 
significantly weaker than the mean strength of the population are in fact much more likely to be selected than 
vessels much stronger than the average. Thus the Weibull uncertainty approach is judged more realistic and we 
shall henceforth use it. 

IV. Case Studies and Main Results 

A. Testing and Results under Standard Operating Conditions 

Next we describe what would happen in a stress-rupture test on SN007, using standard operating conditions: 
pressure p M0P = 4875 psi and temperature T re{ =81°F. In the analytical framework above, to obtain significant 
gains in predicted reliability of OMS-type COP Vs, it is necessary to have test conditions under which significantly 
increased posterior probabilities are possible compared to prior probabilities, that is n > and p U2n > p M2 . 

This means that the test must be run long enough that under the most optimistic scenario /? 0rb = 2.45 and 
s 6/7 M2 = 0.599 the vessel has at least a 50% chance of failure, and preferably as high as 80%; that is, if it is tested to 

shorter than this time and the test is stopped, say, for budgetary reasons, there can be no significant improvement in 
the predicted reliability and the ‘status quo’ will remain. In order to limit the required test time to the maximum of 
100 test cycles, each test cycle must be nominally 4000 hours in duration. (Each ‘cycle’ can be viewed merely as a 
convenient time block for analysis, and does not imply that the vessel must be depressurized and repressurized every 
4000 hours.) 

Thus standard test conditions are set to be, t mct = 4000 hours , and t mpast = t m = 3465 hours , which is the past 
survival time under standard conditions. Thus the number, m t , of past mission cycles survived is 
m , = f nlpasl /t mc ,t = 3465/4000 «1 . Hence, under standard test conditions, the number of ‘test cycles’, n t , at any 
point of the test will be the integer value of the total time on test divided by n l . What is seen immediately is that 
under the most optimistic test scenario, the past mission cycles survived amounts to only one cycle. Consequently 
in subsequent figures and discussion we abbreviate p (i,j ) to p„(i,j ). 

We now consider various results regarding posterior estimates of the probability components p n (/,/) and the 
posterior probabilities P /Ilih2 , and p M2n as a result of running the stress rupture test and surviving varying numbers 

of mission cycles, n . Figure 2 presents posterior results for the case where the vessel is known to have survived n 
mission cycles, i.e., N >n , at standard conditions /? MOP = 4875 psi and r ref = 81°F . Before the test, the ‘prior’ 
probabilities for the shape parameter and stress ratio model, p fi and p M1 , were taken as Vi . Also shown is the 
probability that the vessel will fail by mission cycle n both for the most optimistic starting case p Pi ^ = p M2 - 1 and 
the most pessimistic case P Pllnl = p M4 = 1 . 

Note in Figure 2 that as more and more mission cycles are survived, the posterior probabilities P/i LLNL „ and 
p M 4 n , for the pessimistic parameter values, shift to lower values especially the latter. This means that the 
corresponding posterior probabilities, p j} ^ n and p M2 n , increase for the optimistic vessel parameter values, and the 

increase is dramatic in favor of the optimistic stress ratio Model 2. Should the vessel survive to the median time 
248,000 hours or 62 missions of the most optimistic scenario of parameter choices, we obtain p /p ^ 62 = 0.55 and 

p M1 62 = 0.945 . The inset table in Figure 2 shows the resulting increases in predicted single mission reliability of an 
OMS vessel in current service similar to SN007 and for t mc = 105 hours and t m = 3465 hours . Unfortunately, this 
length of test time, 248,000 hours is not feasible, so shortly we consider accelerating temperature conditions to 
reduce the 248,000 hours to more manageable time. 
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Figure 2. Posterior probability components vs. mission cycles, n, survived assuming prior probabilities 
Pp ~ Pmi ~ 1/2 ? Puo? = 4875 psi and T k{ = 81°F . Also shown are probabilities of vessel survival to various 

cycles, n , as well as prior and posterior reliability at n = 62 . 

Nonetheless, to obtain the corresponding OMS COPV service mission reliability predictions ( t mc =105 hours), 
assuming test survival as described above, we used Monte Carlo simulation on all model parameters including the 
Bernoulli random variable reflecting the choices of the lifetime shape parameter and stress ratio Model. For these 
Bernoulli random variables we used the posterior values p ^ 6 2 = 0.52 and p M2 62 = 0.945 obtained in Figure 2. 

The most important observation is that thee reliabilities relevant to one mission cycle in service increase on the order 
of one ‘nine’ (slightly less for the mean and point estimate and slightly more for the 95% bound). 

In Figure 3 we present posterior results for the case where the vessel is known to have failed exactly on mission 
cycle n , i.e., N = n , under the conditions of Figure 2. As failure occurs at later and later cycle numbers the 
posterior probabilities, n , for the more optimistic Weibull lifetime shape parameter, eventually become slightly 

higher than in Figure 2 (about 0.55 compared to the value 0.5 at test start), whereas the posterior probabilities, 
p M ,„, for optimistic stress ratio Model 2 are not quite as high as in Figure 2, though still very high. However, if 

failure occurs very early (even early for the pessimistic model scenario), p U4 n jumps to almost 1 and p^ „ jumps 

to 0.6, as ought to be the case. This does not occur in Figure 2 since knowing A > n early on provides little true 
information. Generally in Figure 3 we note that the predicted Orbiter OMS mission reliabilities for the case N = 62 
are only slightly different from those for N > 62 in Figure 2, and again reflect a reliability gain of about one ‘nine’. 

Figure 4 presents corresponding results to Figure 3 for the cases where the prior probabilities are reduced to 0.2, 
respectively, for choosing the optimistic scenario / 6 0li = 2.45 and stress ratio Model 2. That is, the prior 
probabilities are slanted heavily to the most pessimistic assumption. Otherwise the parameter choices are the same 
as in Figures 2 and 3 namely. Despite beginning with the more pessimistic prior probabilities, as more and more 
missions are survived there is still a major shift in the posterior probabilities, p n and p M2 „, but there is also 

further room to grow as the posterior values are not as high as starting with 1/2. This also means that the prior 
reliabilities are also slightly worse but in the end, the relative gain in reliability from prior to posterior is 
approximately the same. The general features of the behavior for the case N = n in Figure 4 as compared to Figure 
3 remain qualitatively the same. 
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Figure 3. Posterior probabilities vs. mission cycle, it, when failure occurs for the prior values 
p p = Pwz = 1/2 , p MO? = 4875 psi and T m{ = 81°F . Also shown are probabilities of vessel failure at various 

test cycles, n , as well as prior and posterior reliability at n = 62 . 
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Figure 4. Posterior probabilities vs. mission cycle, n, when failure occurs for the case p p ^ = p M2 = 1/5 = 0.2 , 

Pmop = 4875 psi and T a = 81°F . Also shown are probabilities of vessel survival to various cycles, n , as well 
as prior reliability and posterior reliability at n = 62 . 
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B. Test Acceleration using Increased Temperature and Pressure 

It is clear from the above example that unless some form of acceleration is used, the test time is impractically 
long (248,000 hours or 28 years) to achieve the outcome that stress ratio Model 2 is correct. Thus it is necessary to 
accelerate the test using an increase in pressure or temperature or both. We let T A and p A be elevated temperatures 
and pressures relative to the standard conditions T lcf and p ref , the latter being maximum operating pressure, 4875 
psi, for an OMS vessel. It is shown in [2] that for any elevated pressure, p A , the stress ratios for Model 2 and 
Model 4 are, respectively. 


S m{PtM T rtf) = 


w , ; 


rc n 


A ^007 +^ £L ] 

007 8.674 J 
1430 


(38) 


and 


S M4 (Pcl’ T rcf) = - 


w, 


A ^007 + 


P el 


V 


(8.674 -5.415(0. 1421)) 


rc n 


1430 


(39) 


where W 2 Af ^ =0.978 and W A AV _ =1.011 are Weibull based correction factors for through-thickness gradients in 
the tow (wrap layer) tensions, and for SN007 the delta volume (permanent volume growth from autofrettage) is 
approximately AV 007 = 340 in 3 . Also rc 0rbLLNL =1.02 is a pressure rate correction factor in interpreting the burst 

tests since the LLNL database COPVs were pressurized at a slower rate than the OMS vessels. 

We also have temperature acceleration adjustments we can make to produce higher effective stress ratios to 
substitute into the model as discussed in [1]. The effective stress ratios from temperature acceleration are 

(/>. M = ( Pa ,tJ (40) 

^M4 (p a ,T*) = (41) 

Where ® = 2.86 is the 0°K stress ratio convergence point determined from experiments 

T’ref.K = 300°K (80.6°F), r refF =32 + (9/5)(300-273) = 80.6°F (42) 

and 

T’d.K = 300 + (5/9) (7j, UF - T rcf v ) °K (43) 

Finally we adjust the past survival times to correspond to the new stress ratios according to 

^m,past,el = C (-Pel’^el ) = hn (/'ref ’ -^ref ) [ A M4 (-Pref ’ ^ref )/*^M4 (.Pe l’^el )] (44) 

as well as the Weibull shape parameters at elevated temperatures 

(45) 

and 

AlNL (^-1 ) = AlNL ^el,K /^reCK (46) 

B. Main Results under Accelerated Test Conditions 

We first considered the case p A = 5750 psi and T A = r ref = 80.6°F ; that is, a greatly increased pressure is used 
to accelerate the test but the temperature remains ambient at T ref = 80.6°F . This reduced the test mission cycle time 
to 306 hours but for 61 mission cycles to reach the median time to failure under stress ratio Model 2, the test would 
still take 18,666 hours or 26 months, again longer than desirable. Such a large increase in test pressure also poses 
risks to the titanium liner and ultimately is not viable as a test option. 

The next case considered was the standard service pressure, p = 4875 psi , but temperature accelerated to 

T a = 145°F . Figure 5 shows results where to reach the median time to failure under Model 2 the test now takes 
4560 hours or about 6 months. Apart from shorter tests times in this accelerated case, the basic pattern of vessel 
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probabilities of failure under SR Model 2 and Model 4 as well as prior and posterior probabilities are about the 
same, though accelerating the temperature does show a slight advantage in posterior probabilities and reliabilities. 



Mission cycles, n 


Figure 5. Posterior reliabilities versus number of mission cycles survived assuming prior probabilities 

P Pab = Pmi = V 2 a test pressure of p tet = Pmop = 4875 psi , and 7^ = T a = 145°F . 



Figure 6. Posterior reliabilities versus number of mission cycles survived assuming prior probabilities 

P,j< M = P M i = V 2 > a test pressure of p test =5175 psi , and T test = T d = 130°F . 

Figure 6 shows results for the compromise choices, p d =5175 psi and T d = 1 30°F . In this case the test takes 
4774 hours again about 6 months for the vessel to reach the median time to failure under stress ratio Model 2. 
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Figure 7. Posterior probabilities vs. mission cycle, n, for three vessels on test and all failing close together in 
time (so very little variability). Other test parameters are = p ^ = 1/2 , p MW = 4875 psi and T isf = 81°F . 

Since the posterior probabilities on the choice of the Weibull lifetime shape parameter are little changed from the 
prior values, we consider the case of testing two and three vessels, respectively, under standard test conditions and 
where they all fail within a few cycles of each other. Figure 7 shows posterior probabilities vs. mission cycle, «, for 
three vessels put on test and all failing close together in time so there is very little variability. Other parameters are 
P/i ul = Pmi = 1/2 , an d standard test conditions are assumed, p MOP = 4875 psi and T Kf = 81°F . 
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Figure 8. Uncertainty distributions and predicted reliabilities for one Orbiter mission of an OMS vessel like 
SN007 under various stress ratio models and lifetime shape parameter assumptions. 

Figure 7 shows that if failure occurs for all three vessels near n = 62 mission cycles, then the posterior 
probabilities all improve and are Pp 6 2 =0.76 and /? M2 62 = 0.945. While the posterior reliabilities also increase 
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for an OMS mission cycle on a vessel like SN007, dramatic gains stemming from a high posterior probability of the 
optimistic shape parameter would require testing many more vessels. Thus, without testing many vessels, the test 
does little to resolve whether the Weibull shape parameter J3 0rb = 2.45 is correct or /? LLNL =1.625 is correct as the 
posterior probability is increased only slightly over the prior value p p . One must rely on studying Fleet Leader 
and Orb iter data itself to make that choice [1], 

Finally Figure 8 shows a comparison of the cases in Figure 1 together with the case of stress ratio Model 4 being 
correct but also /? C)rb = 2.45 being correct. The predicted reliabilities for one service mission cycle of a vessel like 
SN007 are about the same for p p ^ = p M2 = 1/2 . However for the most optimistic case where stress ratio Model 2 
and /? Qrb = 2.45 are correct, the predicted mean reliability is about five ‘nines’ and 95% bound exceeds four ‘nines’. 

V. Concluding Comment 

It remains a misconception that testing one vessel can validate the reliability model; such a test can do no such 
thing. Validating the model would require several vessels tested at each of several stress ratios. What the test can 
do is sort out questions about the correct stress ratio model to use, which in turn would point to SN011 being a 
singularly anomalous vessel for which there is much evidence. Clearly a properly run test can yield great benefits in 
improving the reliability, of the order of one order of magnitude or one ‘nine’. 
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